Abstract: A system and method for identifying a catastrophic cyber event of an organization is presented. The method includes creating a hazard table having a summary representation of assets of the organization, wherein the summary representation is represented as parameters of the organization; simulating, based on the parameters of the organization, a cyber event in a subset of a cyber event catalog that includes potential catastrophic cyber events, wherein the cyber event includes descriptors; and estimating a damage of the simulated cyber event that indicates malicious cyber activity on the organization.

Abstract: A system and method for catastrophic event modeling are provided. The method includes generating a cyber event catalog based on a past cyber event, the cyber event catalog including a plurality of cyber events; and simulating a cyber event, of the plurality of cyber events included in the cyber event catalog, to predict whether an organization is affected by a simulated cyber event, wherein the organization is an organization selected from a hazard table.

Abstract: A system and method for catastrophic event modeling are provided. The method includes generating a cyber event catalog based on a past cyber event, the cyber event catalog including a plurality of cyber events; and simulating a cyber event, of the plurality of cyber events included in the cyber event catalog, to predict whether an organization is affected by a simulated cyber event, wherein the organization is an organization selected from a hazard table.

Abstract: A system and method for generating synthetic hazard data for cyber-insurance are provided. The method includes selecting, from treaty information, a shadow company, wherein the treaty information includes records relating to known companies and at least one shadow company, wherein the treaty information relating to the at least one shadow company does not include hazard data; sampling, from a database, a number of known companies that are part of an insurance treaty; determining a probability distribution for a likelihood that the selected shadow company uses at least one digital asset used by the sampled known companies; generating a set of Apriori rules describing the likelihood that two digital assets are used together; generating, for the selected shadow company, synthetic hazard data; and associating the synthetic hazard data with the selected shadow company.